The following note has been added to WildFire API Limits: “Effective February 1, 2023, all submissions from Proofpoint integration will be counted against daily WildFire API limits. This change affects only Proofpoint integration through the WildFire API. It does not affect any WildFire file submissions via other Palo Alto Networks products, such as the NGFW platform, Prisma, or Cortex.”

Customers with Prisma Cloud Compute and Prisma Access subscriptions can now submit samples and query for reports using the WildFire public API.

The /submit/link and /submit/links endpoints have been reverted to return SHA and MD5 hashes values in the XML response.

The /get/verdict and /get/report endpoints now support the url parameter to facilitate retrieval of URL verdicts and a single specified WildFire URL analysis report, respectively.

URL Analysis is currently operational only in the WildFire global (U.S.) cloud. Using the /get/verdicts and /get/report endpoints to retrieve URL verdicts and reports in any of the unsupported regional clouds might produce different results.

The /get/pcap and /get/verdicts endpoints do not support URL analysis functionality at this time.

The /submit/link and /submit/links endpoints no longer returns the hash values in the response if the URL was processed using URL analysis. Regional WildFire clouds operating the legacy elink analyzer will continue to return the hash values.

The following API endpoint was added to support retrieval of web artifacts generated during URL analysis: /get/webartifacts